
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File: ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier: LsWUX6lmrK1nM3Ic2BuHW8VSM0A+zffTLe9FhT/rzj8=
Subject key identifier: 8D:FE:4F:6D:C9:73:7E:52:70:BF:21:08:4C:6B:E0:36:BA:42:31:C6
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial: 01964C6B793A75911B4DA7B1555F7E9F2A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number: 11FA
Signing time: Sat 19 Apr 2025 05:00:33 +0000
Manifest this update: Sat 19 Apr 2025 05:00:33 +0000
Manifest next update: Sun 20 Apr 2025 05:00:33 +0000
Files and hashes: 1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: PXOaVC/lEGRfTs0se9GLAOc/OsL0+kNr+r9/MaW0SqA=)
2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:79:3a:75:91:1b:4d:a7:b1:55:5f:7e:9f:2a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Validity
Not Before: Apr 19 05:00:33 2025 GMT
Not After : Apr 20 05:00:33 2025 GMT
Subject: CN=8dfe4f6dc9737e5270bf21084c6be036ba4231c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:51:fe:88:c1:b8:86:26:f7:4d:97:4e:18:
60:ab:2d:d6:57:d7:ce:f2:04:96:fb:02:3b:46:62:
4d:fc:5f:65:c9:3b:d7:38:ef:ec:88:96:6d:b6:2e:
ff:eb:17:10:d1:cb:6e:57:25:41:80:07:0f:de:02:
0e:1a:5a:1b:12:15:6c:0b:a1:d1:1d:c2:aa:9e:7a:
5d:bf:ef:b2:8b:1a:f9:94:4b:74:69:21:1b:fb:d5:
ad:4f:49:41:b3:a5:24:78:36:29:f8:d7:6c:2a:cc:
2b:24:ad:54:f4:a5:ad:56:bb:04:ec:15:9a:7a:af:
a9:29:09:2e:a2:1b:21:91:2f:08:16:7a:b7:fe:87:
61:dd:26:b3:b5:cc:46:ba:54:59:26:f1:39:ad:79:
4b:86:d1:75:93:bd:47:c3:2d:91:a0:5f:0a:48:39:
e3:93:36:41:a7:0b:83:44:d6:da:bd:5b:74:ce:c5:
27:2c:b5:64:3b:de:23:96:fc:e7:51:9e:2a:58:c2:
2f:23:62:2d:c8:a5:bb:dc:66:e1:c5:b2:ea:b6:49:
77:d8:f7:ee:26:ac:92:6e:35:35:8b:b3:2b:e9:4a:
63:9f:7e:64:86:cc:87:60:f8:c3:4f:72:ce:4b:8a:
e6:14:6f:70:7d:84:2d:aa:11:6c:91:2a:04:7d:61:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FE:4F:6D:C9:73:7E:52:70:BF:21:08:4C:6B:E0:36:BA:42:31:C6
X509v3 Authority Key Identifier:
keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e4:d6:14:9c:4a:0a:b1:47:59:0e:f4:eb:12:be:08:f5:1b:
68:03:d2:0a:9b:c7:63:39:ef:e4:c9:e7:2d:9b:e1:94:37:56:
ab:2f:18:72:5d:c9:f1:43:8e:17:8c:f7:42:65:20:40:2c:3c:
6f:39:27:40:3b:ee:eb:e6:92:07:24:f0:e2:fb:16:5a:7a:bc:
d3:6c:6a:54:b5:49:b5:5a:a6:ab:99:76:8e:d9:47:93:12:b2:
18:45:24:22:57:e1:9a:46:61:ed:65:f2:3f:71:19:94:8b:1a:
46:b7:0d:ff:c2:dc:66:47:f9:a0:7d:c5:27:e8:40:b3:a3:88:
85:33:28:6a:ee:86:83:db:a1:5a:45:39:ed:39:c0:f5:ea:5d:
46:23:05:5c:11:9a:da:20:13:0e:1d:b5:cc:9b:1e:4f:dd:9b:
05:5b:40:d4:aa:53:4d:b5:cc:b6:91:93:1d:e1:36:2a:bb:b3:
1a:c0:32:4e:8a:65:f4:c3:53:4a:08:bf:93:f4:1c:a0:9a:80:
8c:83:45:ed:5d:07:33:a9:9e:56:06:41:7e:6b:f2:90:06:86:
68:18:d9:72:2c:04:6b:97:17:40:9e:bc:73:76:9d:57:c0:92:
bd:1d:88:e1:b4:5e:99:7d:66:a9:ba:ba:18:40:a5:90:76:e4:
af:9d:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:01 2025 by rpki-client